Privacy

Who runs Nimbo

Nimbo is made and operated by Lucas Maffei (LumaSoft), in Brazil. For anything about your data, write to nimbo@lumahost.com.

What we store

Your account: name, email address, password (only as a secure hash), language and the plan you have.

Your files: the contents are stored at Backblaze B2, in a data center in the United States, with server-side encryption. In storage they are identified only by random IDs, never by name.

File information: names, sizes, dates and the folder tree are kept in the Nimbo database, so we can show your files on the Mac and on the web.

Connected Macs: the name you approved for each Mac, the app version and when it was last seen.

Links and pages to receive files: what you created, when they expire, and how many times they were opened or used.

Who can see your files

Each account is isolated: nobody else using Nimbo can reach your files, except through links you create.

Without end-to-end encryption, files are encrypted in storage but the service holds the keys. That means the operator could technically access them. We do not look at your files, and the admin panel does not show their contents, but we want to be clear about what is possible.

Optional end-to-end encryption is coming. When it is turned on, contents and names will be encrypted on your devices and nobody but you will be able to read them.

Services we use

Backblaze B2 stores the file contents. LumaSend sends account emails (confirmation and password reset). Cloudflare Turnstile may check that sign-ups and sign-ins come from people. Error reports from the server and the app go to an error tracker that we run ourselves.

We do not sell your data, we do not show ads and we do not use your files to train anything.

Cookies

Only the ones Nimbo needs to work: your session when you are signed in, a protection against forged requests, and your choices of language and appearance. There are no advertising or tracking cookies.

Logs

The server keeps technical logs (such as IP address, time and the page requested) and error reports to keep the service running and to fight abuse. They are kept for a limited time.

Deleting your data

You can delete your account at any time in Settings. That deletes your account, your file information and the file contents in storage. Files in the trash are deleted for good 30 days after you delete them.

To ask for a copy of what we keep about you, or to correct it, write to nimbo@lumahost.com.

Changes

If this page changes in a way that matters, we will let you know by email before the change takes effect.